syzbot

INFO: task kworker/0:0:7 blocked for more than 143 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:24408 pid:7     ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task kworker/1:0:22 blocked for more than 143 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:0     state:D stack:24728 pid:22    ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task kworker/1:2:898 blocked for more than 143 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:2     state:D stack:24384 pid:898   ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task kworker/0:2:900 blocked for more than 144 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2     state:D stack:24808 pid:900   ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task kworker/0:1:5158 blocked for more than 144 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1     state:D stack:24232 pid:5158  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6754
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0xa3b/0x1350 kernel/locking/mutex.c:747
 unregister_netdev+0x12/0x30 net/core/dev.c:10912
 r871xu_dev_remove+0x289/0x470 drivers/staging/rtl8712/usb_intf.c:597
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task kworker/1:1:5162 blocked for more than 144 seconds.
      Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:24808 pid:5162  ppid:2      flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5301 [inline]
 __schedule+0x25d0/0x5a70 kernel/sched/core.c:6619
 schedule+0xde/0x1a0 kernel/sched/core.c:6695
 schedule_timeout+0x1e1/0x2a0 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common+0x1ce/0x5c0 kernel/sched/completion.c:106
 r871xu_dev_remove+0x72/0x470 drivers/staging/rtl8712/usb_intf.c:595
 usb_unbind_interface+0x1dc/0x8e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:542 [inline]
 device_remove+0x11f/0x170 drivers/base/dd.c:534
 __device_release_driver drivers/base/dd.c:1240 [inline]
 device_release_driver_internal+0x443/0x610 drivers/base/dd.c:1263
 bus_remove_device+0x2e7/0x5a0 drivers/base/bus.c:488
 device_del+0x48a/0xb80 drivers/base/core.c:3620
 usb_disable_device+0x35a/0x7b0 drivers/usb/core/message.c:1420
 usb_disconnect.cold+0x259/0x6ed drivers/usb/core/hub.c:2238
 hub_port_connect drivers/usb/core/hub.c:5247 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5552 [inline]
 port_event drivers/usb/core/hub.c:5712 [inline]
 hub_event+0x1fb5/0x4840 drivers/usb/core/hub.c:5794
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 process_scheduled_works kernel/workqueue.c:2453 [inline]
 worker_thread+0x858/0x1090 kernel/workqueue.c:2539
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/0:0/7:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900000c7da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff888021579190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff888021579190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff88802a59e190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff88802a59e190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff88801e407118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
1 lock held by rcu_tasks_kthre/13:
 #0: ffffffff8c793cb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 kernel/rcu/tasks.h:516
1 lock held by rcu_tasks_trace/14:
 #0: ffffffff8c7939b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 kernel/rcu/tasks.h:516
5 locks held by kworker/1:0/22:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900001c7da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff8881473f9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff8881473f9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff88802b0ac118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
1 lock held by khungtaskd/28:
 #0: ffffffff8c794880 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x2d4 kernel/locking/lockdep.c:6544
2 locks held by kworker/u4:4/56:
 #0: ffff8880b993c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:539
 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: mm_cid_get kernel/sched/sched.h:3299 [inline]
 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: switch_mm_cid kernel/sched/sched.h:3321 [inline]
 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: prepare_task_switch kernel/sched/core.c:5111 [inline]
 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: context_switch kernel/sched/core.c:5252 [inline]
 #1: ffff8880188148b0 (&mm->cid_lock){....}-{2:2}, at: __schedule+0x2b2e/0x5a70 kernel/sched/core.c:6619
5 locks held by kworker/1:2/898:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004d2fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff8881473d1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff8881473d1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff88807832a118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
5 locks held by kworker/0:2/900:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000485fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff8881473b9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff8881473b9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff888027fc8118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
2 locks held by dhcpcd/4653:
 #0: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x1c4/0x1df0 net/ipv4/devinet.c:1071
 #1: ffff888021f7cdf0 (&padapter->mutex_start){+.+.}-{3:3}, at: netdev_open+0x32/0x6a0 drivers/staging/rtl8712/os_intfs.c:391
2 locks held by getty/4757:
 #0: ffff88802753c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244
 #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177
6 locks held by kworker/0:1/5158:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000404fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff8880216d9190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff8880216d9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff88802b6b7118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
 #5: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 net/core/dev.c:10912
3 locks held by kworker/0:3/5160:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000405fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
5 locks held by kworker/1:1/5162:
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff8881454b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000407fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffff8881473e1190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #2: ffff8881473e1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4840 drivers/usb/core/hub.c:5740
 #3: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #3: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed drivers/usb/core/hub.c:2229
 #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:831 [inline]
 #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1063 [inline]
 #4: ffff8880275cb118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 drivers/base/dd.c:1260
3 locks held by udevd/5163:
 #0: ffff88801f88c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
 #0: ffff88801f88c088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280
 #1: ffff888028272a00 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
 #1: ffff888028272a00 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280
 #2: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
 #2: ffff88802192c190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874
3 locks held by kworker/1:3/5165:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900040afda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:4/5167:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900040bfda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by udevd/5169:
 #0: ffff88802973d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
 #0: ffff88802973d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280
 #1: ffff88802886c578 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
 #1: ffff88802886c578 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280
 #2: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
 #2: ffff88802038c190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874
3 locks held by udevd/5171:
 #0: ffff88801d105c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
 #0: ffff88801d105c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280
 #1: ffff888026a853a8 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
 #1: ffff888026a853a8 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280
 #2: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
 #2: ffff88807bfd5190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874
3 locks held by kworker/0:6/5180:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004147da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/0:7/5181:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004157da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:5/5182:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004167da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/0:8/5228:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000410fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/0:9/5229:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000424fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:7/5247:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004297da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:8/5281:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900042f7da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:9/5282:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc900042e7da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:10/5283:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000434fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:11/5285:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000436fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/1:12/5286:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000437fda8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by kworker/0:11/5330:
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc90004137da8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x15/0x50 net/core/dev.c:10171
3 locks held by udevd/5504:
 #0: ffff88802a67c888 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
 #0: ffff88802a67c888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280
 #1: ffff88807df38e88 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
 #1: ffff88807df38e88 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280
 #2: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
 #2: ffff888021d0d190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874
3 locks held by udevd/5505:
 #0: ffff88801ff79c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_file_read_iter fs/kernfs/file.c:240 [inline]
 #0: ffff88801ff79c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x18e/0x690 fs/kernfs/file.c:280
 #1: ffff888028892cb8 (kn->active#27){++++}-{0:0}, at: kernfs_file_read_iter fs/kernfs/file.c:241 [inline]
 #1: ffff888028892cb8 (kn->active#27){++++}-{0:0}, at: kernfs_fop_read_iter+0x1b1/0x690 fs/kernfs/file.c:280
 #2: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:836 [inline]
 #2: ffff88802a59b190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x40/0x2c0 drivers/usb/core/sysfs.c:874
3 locks held by kworker/1:13/8432:
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888027230138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 kernel/workqueue.c:2361
 #1: ffffc9000c357da8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 kernel/workqueue.c:2365
 #2: ffffffff8e0cd208 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4624

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x32f/0x3c0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xcae/0x1050 kernel/hung_task.c:377
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:67 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:127 [inline]
RIP: 0010:lock_is_held_type+0xee/0x140 kernel/locking/lockdep.c:5763
Code: c0 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 e0 61 4c 8a e8 35 15 00 00 b8 ff ff ff ff 65 0f c1 05 98 96 fd 75 83 f8 01 75 29 9c <58> f6 c4 02 75 3d 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44
RSP: 0018:ffffc90001577920 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffffff8c7947c0 R08: 0000000000000000 R09: ffffffff8e7425d7
R10: fffffbfff1ce84ba R11: 0000000000000000 R12: ffff888017f4d7c0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888017f4e2c0
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdb850890f0 CR3: 0000000012463000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 lock_is_held include/linux/lockdep.h:288 [inline]
 rcu_read_lock_sched_held+0x3e/0x70 kernel/rcu/update.c:125
 trace_tlb_flush include/trace/events/tlb.h:38 [inline]
 trace_tlb_flush+0x1b1/0x240 include/trace/events/tlb.h:38
 switch_mm_irqs_off+0x668/0xbe0 arch/x86/mm/tlb.c:630
 use_temporary_mm arch/x86/kernel/alternative.c:1494 [inline]
 __text_poke+0x2f7/0x8e0 arch/x86/kernel/alternative.c:1605
 text_poke arch/x86/kernel/alternative.c:1669 [inline]
 text_poke_bp_batch+0x445/0x6b0 arch/x86/kernel/alternative.c:2025
 text_poke_flush arch/x86/kernel/alternative.c:2129 [inline]
 text_poke_flush arch/x86/kernel/alternative.c:2126 [inline]
 text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:2136
 arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x32f/0x410 kernel/jump_label.c:829
 static_key_enable_cpuslocked+0x1b5/0x270 kernel/jump_label.c:205
 static_key_enable+0x1a/0x20 kernel/jump_label.c:218
 toggle_allocation_gate mm/kfence/core.c:799 [inline]
 toggle_allocation_gate+0xf8/0x230 mm/kfence/core.c:791
 process_one_work+0x9bf/0x1750 kernel/workqueue.c:2390
 worker_thread+0x669/0x1090 kernel/workqueue.c:2537
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>